VYPR
← All advisories
Critical severity9.8NVD Advisory· Published Mar 27, 2025· Updated Jun 17, 2026

CVE-2025-30361

CVE-2025-30361

Description

WeGIA is a Web manager for charitable institutions. A security vulnerability was identified in versions prior to 3.2.6, where it is possible to change a user's password without verifying the old password. This issue exists in the control.php endpoint and allows unauthorized attackers to bypass authentication and authorization mechanisms to reset the password of any user, including admin accounts. Version 3.2.6 fixes the issue.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

4
  • Wegia/Wegiallm-fuzzy2 versions
    <3.2.6+ 1 more
    • (no CPE)range: <3.2.6
    • cpe:2.3:a:wegia:wegia:*:*:*:*:*:*:*:*range: <3.2.6
  • LabRedesCefetRJ/Wegiallm-fuzzy2 versions
    <3.2.6+ 1 more
    • (no CPE)range: <3.2.6
    • (no CPE)range: < 3.2.6

Patches

Vulnerability mechanics

References

1

News mentions

0

No linked articles in our index yet.